Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 1, 2025

This PR contains the following updates:

Package Type Update Change Age Confidence
github/codeql-action action patch v4.31.4 -> v4.31.7 age confidence
io.quarkus plugin patch 3.30.0 -> 3.30.2 age confidence
io.quarkus:quarkus-junit5 dependencies patch 3.30.0 -> 3.30.2 age confidence
io.quarkus:quarkus-arc dependencies patch 3.30.0 -> 3.30.2 age confidence
io.quarkus:quarkus-bom dependencies patch 3.30.0 -> 3.30.2 age confidence
io.kotest:kotest-assertions-table dependencies patch 6.0.5 -> 6.0.7 age confidence
io.kotest:kotest-assertions-core dependencies patch 6.0.5 -> 6.0.7 age confidence
io.kotest:kotest-framework-engine dependencies patch 6.0.5 -> 6.0.7 age confidence
io.kotest:kotest-runner-junit5 dependencies patch 6.0.5 -> 6.0.7 age confidence

Release Notes

github/codeql-action (github/codeql-action)

v4.31.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025
  • Update default CodeQL bundle version to 2.23.7. #​3343

See the full CHANGELOG.md for more information.

v4.31.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025
  • Update default CodeQL bundle version to 2.23.6. #​3321

See the full CHANGELOG.md for more information.

quarkusio/quarkus (io.quarkus:quarkus-junit5)

v3.30.2

Compare Source

Complete changelog
  • #​48784 - Support ephemeral ports in dev services config
  • #​48815 - Fix dev service ephemeral ports: Make test resource config override dev service config and system props
  • #​50389 - Testing Lambda resource endpoint with rest-assured and random test-port results in an IllegalArgumentException
  • #​50513 - quarkus-cache with cache.getAsync() does not respect expire-after-write or expire-after-access
  • #​50931 - Make sure that Mutiny can use SR-CP to propagate cancel() up from CompletableFuture
  • #​51055 - Upgrade from Hibernate ORM 7.1.6.Final to 7.1.10.Final and from Hibernate Reactive 3.1.8.Final to 3.1.9.Final
  • #​51116 - Docs fix: Minor corrections to OpenShift guide based on downstream QE feedback
  • #​51148 - Bump narayana-lra.version from 1.0.2.Final to 1.0.3.Final
  • #​51245 - Docker compose dev services fails on Docker v29
  • #​51247 - Fix Docker Compose Dev Services NPE on Docker v29
  • #​51254 - StartupLogCompressor NULL checks
  • #​51266 - Quarkus maven plugin sometimes fails to acquire maven lock
  • #​51269 - Re-running failing test fails with classloader errors
  • #​51272 - Re-try Maven resolver lock acquisition errors with a blocking task runner
  • #​51280 - Bump to Mutiny 3.0.3 and Vert.x Mutiny bindings 3.20.4
  • #​51281 - unable to test with InMemoryConnector after upgrading to 3.30
  • #​51283 - Improvements on observability docs
  • #​51285 - java.util.concurrent.ExecutionException: java.lang.IllegalArgumentException: Duplicate field added thrown during JUNIT test
  • #​51287 - OpenAPI: skip adding method references to model without OperationFilter
  • #​51289 - Use RoutingContext#normalizedPath() in access log exclusion
  • #​51294 - Update to UBI 9 9.7
  • #​51298 - Dispose of the FacadeClassLoader at the end of every test plan so surefire reruns are tolerated
  • #​51302 - Bump org.hibernate.tool:hibernate-tools-language from 7.1.6.Final to 7.1.10.Final in the hibernate group across 1 directory
  • #​51304 - Update version of jandex gradle plugin in docs
  • #​51305 - Update documentation to point to Jandex Gradle 2.3.0
  • #​51308 - Dev MCP: Reduce the payload for the extension list call
  • #​51309 - Make messaging channel connector and enabled config properties runtime (again)
  • #​51311 - ArC: guard against multiple occurrences of the same decorator
  • #​51335 - Fix typo

v3.30.1

Compare Source

Complete changelog
  • #​47036 - Hibernate Extension: Check the error message when multiple JDBC Driver
  • #​50634 - Hibernate default blocking PU + named reactive PU causes errors
  • #​50955 - Entity not found?
  • #​51033 - Deadlock when using SseBroadcasterImpl
  • #​51042 - Introduce timeout settings for Blocking mailer
  • #​51081 - Reinstate missing output from @QuarkusIntegrationTest
  • #​51085 - Quarkus Native fails to detect Podman on Windows.
  • #​51089 - Avoid deadlock between SseEventSinkImpl and SseBroadcasterImpl
  • #​51101 - Deprecated configuration properties are always missing from Quarkus extension docs
  • #​51117 - quarkus-junit5-component should depend on quarkus-junit5-config
  • #​51122 - Make podman version detection pattern to be case-insensitive
  • #​51124 - Clean up various elements of our BOM
  • #​51136 - Misaligned Netty dependencies
  • #​51137 - Start Hibernate Reactive in offline mode in devmode ITs
  • #​51141 - Fully disable Develocity capture of resource usage
  • #​51142 - Update Vert.x version to 4.5.22 in vertx-utils
  • #​51146 - Bump smallrye-mutiny-vertx-core.version from 3.20.2 to 3.20.3
  • #​51147 - Bump smallrye-open-api.version from 4.2.2 to 4.2.3
  • #​51155 - Display deprecated properties in documentation
  • #​51159 - Prevent startup failing when having mismatched datasource types
  • #​51161 - QuarkusComponentTest: make sure logging is always initialized
  • #​51171 - Bump io.smallrye.reactive:smallrye-mutiny-vertx-core from 3.20.2 to 3.20.3
  • #​51176 - Panache fails with entity not found on MappedSuperclass Entities and Disciriminated Entities
  • #​51178 - Quarkus should not assume generated sources exists
  • #​51184 - Don't assume generated sources directory exists
  • #​51202 - Bump snappy.version from 1.1.10.5 to 1.1.10.8
  • #​51212 - Reintroduce ReflectiveClassBuildItem#finalFieldsWritable
  • #​51213 - Also populate Panache's "entityToPersistenceUnit" maps with subclasses of those mentioned in repositories
  • #​51221 - Bump to actions/checkout@v6 and `actions/setup-java`@v5 in the templates
  • #​51231 - Add configurable timeout for blocking mailer
kotest/kotest (io.kotest:kotest-assertions-table)

v6.0.7

Compare Source

What's Changed

Full Changelog: kotest/kotest@v6.0.6...v6.0.7

v6.0.6

Compare Source

What's Changed

Full Changelog: kotest/kotest@v6.0.5...v6.0.6


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 24157ab to f6ee273 Compare December 1, 2025 10:52
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from f6ee273 to e076a8f Compare December 3, 2025 13:39
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from e076a8f to 5563841 Compare December 5, 2025 17:52
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
- name: "Upload to code-scanning"
uses: github/codeql-action/[email protected].4
uses: github/codeql-action/[email protected].7

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
@osoykan osoykan merged commit 56085db into main Dec 8, 2025
5 checks passed
@renovate renovate bot deleted the renovate/all-minor-patch branch December 8, 2025 07:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants